tightvnc vulnerabilities

[Jamie Strandboge]

On Mon, 17 Dec 2018, Pavel Cheremushkin wrote:

> Hello,
> 
> I found this e-mail as a maintainer of xtightvncviewer package in Ubuntu 18.04 release.
> 
> I wanted to warn you that recently I have reported 4 vulnerabilities in tightvnc 1.3.X,  that is used in Ubuntu and developers refused to patch these vulnerabilities. More information including overview of the vulnerabilities: https://www.openwall.com/lists/oss-security/2018/12/10/5
> 

FYI, This is better handled via our bug tracker and I filed this bug on your
behalf:
https://bugs.launchpad.net/ubuntu/+source/tightvnc/+bug/1808989

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20181218/4b8e70ec/attachment.sig>